Privacy Policy

Who is the controller

Goup Space Sp. z o.o., ul. Hoża 86/210, 00-682 Warszawa, Poland (NIP 7011061440, REGON 520583134, KRS 0000932799).

For any privacy question or to exercise your rights, contact us by phone at +48 533 779 133 or on Telegram at @cosmo_pl.

What data we collect

When you submit the audit form we process: your email address; the website domain you asked us to check; your IP address; the date and time of the request; and a record of the consent you gave (the box you ticked, the text you were shown and the version of this policy).

We may also store a reCAPTCHA risk score returned by Google for the request, used only to tell humans from bots.

Why we process it (purposes)

To run the requested passive audit and to send you its results, information about any issues we identify and an offer to help you resolve them. The email you provide also identifies who requested the audit.

To prevent abuse of the free tool (anti-bot and rate limiting).

Legal basis

Running the audit and delivering its results, the list of identified issues and an offer to resolve them: your consent (Art. 6(1)(a) GDPR), which is also necessary to provide the service you requested (Art. 6(1)(b) GDPR).

Security, abuse-prevention and keeping proof of consent: our legitimate interest (Art. 6(1)(f) GDPR) in operating the service safely.

What the audit inspects

The audit is passive: it only inspects publicly available signals of the domain you submit (for example DNS records, TLS certificates, HTTP response headers and publicly served pages). It does not log in, does not attempt intrusion and does not process personal data held on the audited site.

How long we keep it

We keep the lead record (email, domain, request metadata and consent proof) for as long as needed for the purposes above and to evidence your consent, and no longer than required by law. You may ask us to erase your data at any time.

Sharing and transfers

We do not sell your data. We use Google reCAPTCHA to screen out bots, which means the request may be processed by Google under its own terms. We use service providers (e.g. hosting) only as needed to run the tool.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw any consent at any time without affecting processing already carried out. To exercise any of these, contact us using the details above.

You also have the right to lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, UODO).